CVE-2016-3074
CriticalSummary
Integer signedness error in GD Graphics Library 2.1.1 allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, triggering a heap-based buffer overflow.
Risk Assessment
Organizations may be exposed to attacks that can lead to system crashes or unauthorized code execution, potentially resulting in data loss or security breaches.
Recommendation
It is recommended to update the GD Graphics Library to the latest version to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow.